Q301--Transplant Laboratory Testing See attached 0002 for details.

The contract solicitation 36C25626R0027, issued by the Department of Veterans Affairs through the Network Contracting Office 16 in Houston, Texas, seeks commercial services for histocompatibility and transplant-related immune testing at the Michael E. DeBakey VA Medical Center in Houston, with primary performance required at the contractor’s laboratory within ten miles of the city. The contract is structured as a five-year indefinite-delivery/indefinite-quantity (IDIQ) with five one-year ordering periods and an optional six-month extension, governed under commercial item acquisition rules per FAR 52.212-1 and 52.212-2, with award to be made on a lowest priced technically acceptable (LPTA) basis. Offerors must submit a complete proposal including detailed pricing by CPT code, a relevant experience form, a business associate agreement, and a quality assurance surveillance plan, all electronically submitted by June 10, 2026, to the designated contracting specialist. Performance requires strict adherence to UNOS HLA guidelines, HIPAA, Medicare, and College of American Pathologists standards, with 100% compliance mandated for attendance at mandatory meetings, turnaround time targets, and regulatory certifications. Security and compliance requirements are stringent, mandating use of FIPS 140-2 validated encryption for all data transmissions, adherence to NIST SP 800-52 and 800-88 for secure handling, and implementation of a Software Bill of Materials per NTIA guidelines. The contractor must maintain active Medicare, CAP, and UNOS accreditation, provide a 24/7 HLA expert on-call, and enforce strict chain-of-custody and tamper-evident packaging for physical specimens. Key personnel must be pre-approved and cannot be replaced without 30 days’ written notice and formal government consent. All personnel requiring system access must clear VA security protocols, sign the Information Security Rule of Behavior, and comply with NISPOM standards. In the event of a data breach involving protected health information, liquidated damages apply per affected individual. Invoicing must be submitted monthly via the VA e-Invoice Portal within 30 days of month-end, including detailed line items by CPT code, and no payment will be processed without full certification of compliance with whistleblower protections, subcontractor prohibitions, and conflict of interest disclosures. The contract explicitly prohibits the use of covered telecommunications equipment from Communist countries of